repository icon
star7th / showdoc Project repository

ShowDoc is a tool greatly applicable for an IT team to share documents online一个非常适合IT团队的在线API文档、技术文档工具

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN2 DAYS

FIX

WITHIN8 DAYS

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
7h3h4ckv157
not applicable
EXIF Geolocation Data Not Stripped From Uploaded Images (vulnerability)
tharunavula
not applicable
Insufficient Cryptography On Showdoc Android APK Client
akshayravic09yc47
not applicable
CSRF leads to fileupload
akshayravic09yc47
not applicable
Metadata is not stripped from images
akshayravic09yc47
not applicable
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3
metastor
Critical
•$40•CVE-2022-1034
Using vulnerable dependencies in package.json
akshayravic09yc47
High
Stored XSS viva .webma file upload
sampritdas8
Critical
•CVE-2022-0962
Stored XSS viva .webmv file upload
sampritdas8
High
•CVE-2022-0964
Stored XSS via File Upload in star7th/showdoc in star7th/showdoc
akshayravic09yc47
Medium
•CVE-2022-0967
Stored XSS viva .ofd file upload
sampritdas8
Critical
•CVE-2022-0965
Stored XSS viva .properties file upload
sampritdas8
Critical
•CVE-2022-0960
Stored XSS via File Upload in star7th/showdoc
akshayravic09yc47
Medium
•CVE-2022-0966
Stored XSS via File Upload
ajaysenr
High
•CVE-2022-0957
Stored XSS via File Upload
ajaysenr
High
•CVE-2022-0956
Stored XSS viva cshtm file upload
sampritdas8
Critical
•CVE-2022-0946
Stored XSS viva axd and cshtml file upload in star7th/showdoc
sampritdas8
Critical
•CVE-2022-0945
File Upload Restriction Bypass leading to Stored XSS Vulnerability
scriptidiot
High
•$2•CVE-2022-0951
Stored XSS due to Unrestricted File Upload
ajaysenr
Critical
•$80•CVE-2022-0942
Stored XSS due to Unrestricted File Upload
ajaysenr
High
•$40•CVE-2022-0941
Stored XSS due to Unrestricted File Upload
ajaysenr
Medium
•CVE-2022-0940
Unrestricted Upload of File with Dangerous Type
nhiephon
Medium
•CVE-2022-0950
Stored XSS via file upload
ajaysenr
High
•$40•CVE-2022-0938
Stored xss in showdoc through file upload
noobexploiterhuntrdev
Medium
•CVE-2022-0937
Cross-site Scripting (XSS) - Stored
khanhchauminh
High
•$48•CVE-2022-0880
SQL Injection
laladee
Medium
•$124•CVE-2022-0362
Unrestricted Upload of File with Dangerous Type
khanhchauminh
High
•$93•CVE-2022-0409
Generation of Error Message Containing Sensitive Information
theworstcomrade
Medium
•$33•CVE-2022-0079
Cross-site Scripting (XSS) - Stored
khanhchauminh
Medium
•$108.5•CVE-2021-4172
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$77.5•CVE-2021-4168
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$64•CVE-2021-3993
Cross-Site Request Forgery (CSRF)
khanhchauminh
High
•$77.5•CVE-2021-4017
Open Redirect
khanhchauminh
Medium
•$15.5•CVE-2021-4000
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
hi-unc1e
Medium
•$77.5•CVE-2021-3990
Open Redirect
khanhchauminh
Medium
•$15.5•CVE-2021-3989
Authentication Bypass Using an Alternate Path or Channel
hi-unc1e
Medium
•$70
Authentication Bypass Using an Alternate Path or Channel
hi-unc1e
High
•$150
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$62.5•CVE-2021-3775
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$150•CVE-2021-3776
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$50•CVE-2021-3683
Missing Cryptographic Step
michaellrowley
Medium
•$80•CVE-2021-3680
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
michaellrowley
High
•$80•CVE-2021-3678